Login Request a demo
SA
Product
Satellite
by Redhat · last CVE Oct 1, 2026
On CISA KEVExploited in the wild
241
CVEs
4
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities241In the news2Timeline
Severity mix
Critical 31High 64Medium 107Low 23
Severity
All severities241Critical31High64Medium107Low23
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Satellite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3427
In wildKEV
9.8
92%
Apr 21
Oracle Java SE and JRockit Unspecified Vulnerability
Affected: 5.6; 5.7
CVE-2015-2590
In wildKEV
9.8
25%
Jul 16
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Affected: 5.6; 5.7
CVE-2026-48710
In wildKEV
6.5
70%
May 26
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Affected: 6.17; 6.18; 6.19
CVE-2015-4902
In wildKEV
5.3
14%
Oct 21
Oracle Java SE Integrity Check Vulnerability
Affected: 5.6; 5.7
CVE-2024-7923
9.8
1%
Sep 4
Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore
Affected: 6.13; 6.14; 6.15
CVE-2024-7012
9.8
1%
Sep 4
Puppet-foreman: an authentication bypass vulnerability exists in foreman
Affected: 6.13; 6.14; 6.15
CVE-2019-10137
9.8
3%
Jul 2
A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens
Affected: 5.0
CVE-2018-12549
9.8
2%
Feb 11
In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it
Affected: 5.8
CVE-2018-12547
9.8
3%
Feb 11
In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter
Affected: 5.8
CVE-2018-10931
9.8
68%
Aug 9
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC
Affected: 5.6; 5.7; 5.8
CVE-2017-7470
9.8
2%
Jul 27
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in…
Affected: 5.6; 5.7
CVE-2017-15095
9.8
8%
Feb 6
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending…
Affected: 6.4
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: 5.8
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 5.8
CVE-2017-5929
9.8
8%
Mar 13
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components
Affected: 6.4
CVE-2017-10346
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 5.8
CVE-2017-10285
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 5.8
CVE-2017-10110
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 5.8
CVE-2017-10107
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 5.8
CVE-2017-10101
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 5.8
CVE-2017-10096
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 5.8
CVE-2017-10090
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.8
CVE-2017-10089
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO)
Affected: 5.8
CVE-2017-10087
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 5.8
CVE-2026-96659
9.1
0%
Oct 1
Foreman: excessive permissions for viewer role on preview
Affected: 6.16 before 6.16.4; 6.17 before 6.17.12; 6.19 before 6.19.5; 6.18 before 6.18.10
CVE-2022-3874
9.1
2%
Sep 22
A command injection flaw was found in foreman
Affected: 6.0
CVE-2023-0462
9.1
1%
Sep 20
An arbitrary code execution flaw was found in Foreman
Affected: 6.0 and later
CVE-2023-0118
9.1
1%
Sep 20
An arbitrary code execution flaw was found in Foreman
Affected: 6.13 before 6.13.3
CVE-2019-17631
9.1
2%
Oct 17
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks
Affected: 5.8
CVE-2015-5041
9.1
4%
Jun 6
The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive…
Affected: 5.6; 5.7
CVE-2008-2369
9.1
3%
Aug 14
manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect to the server and obtain sensitive…
Affected: before 5.1.1
CVE-2018-3183
9.0
3%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
Affected: 5.8
CVE-2017-10102
9.0
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 5.8
CVE-2026-96658
8.8
1%
Oct 1
Foreman: foreman: arbitrary code execution via safemode sandbox bypass
Affected: 6.16 before 6.16.4; 6.17 before 6.17.12; 6.19 before 6.19.5; 6.18 before 6.18.10
CVE-2026-5136
8.8
1%
Jul 1
Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation
Affected: 6.16 before 6.16.10; 6.17 before 6.17.9; 6.18 before 6.18.7; 6.19 before 6.19.2
CVE-2026-1961
8.8
2%
Mar 26
Forman: foreman: remote code execution via command injection in websocket proxy
Affected: 6.16 before 6.16.7; 6.17 before 6.17.7; 6.18 before 6.18.4; 6.0
CVE-2026-0980
8.8
1%
Feb 27
Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username
Affected: 6.0
CVE-2021-3590
8.8
1%
Aug 22
A flaw was found in Foreman project
Affected: 6.0
CVE-2020-14334
8.8
0%
Jul 31
A flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files
Affected: 6.0
CVE-2017-2672
8.8
1%
Jun 21
A flaw was found in foreman before version 1.15 in the logging of adding and registering images
Affected: 6.3
CVE-2016-9593
8.8
1%
Apr 16
foreman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging
Affected: 6.0
CVE-2018-1097
8.8
2%
Apr 4
A flaw was found in foreman before 1.16.1
Affected: 6.4
CVE-2016-9842
8.8
5%
May 23
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers
Affected: 5.8
CVE-2016-9840
8.8
5%
May 23
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 5.8
CVE-2016-3072
8.8
2%
Jun 7
Multiple SQL injection vulnerabilities in the scoped_search function in app/controllers/katello/api/v2/api_controller.rb in Katello allow remote authenticated users to execute…
Affected: 6.1
CVE-2012-5562
8.6
1%
Dec 2
A flaw was found in rhn-proxy
Affected: before 5.6
CVE-2018-3169
8.3
4%
Oct 17
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 5.6; 5.7; 5.8
CVE-2018-3149
8.3
7%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
Affected: 5.6; 5.7; 5.8
CVE-2018-2639
8.3
3%
Jan 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 5.8
CVE-2018-2638
8.3
3%
Jan 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 5.8
Page 1 of 5 · 241 total
12…5